Identity & Access Management (IAM) Engineer

3 - 5 Years
1 Opening
Trivandrum

Role Overview

The IAM Engineer is responsible for implementing and managing identity and access controls across enterprise systems and applications. This role ensures secure user lifecycle management — including provisioning, modification, and de-provisioning of access — in alignment with security, compliance, and audit standards. The IAM Engineer will collaborate closely with Service Desk, Application Owners, and Security teams to ensure operational excellence and effective access governance.

Key Responsibilities

1. User Lifecycle Management

• Execute Joiner–Mover–Leaver (JML) processes across enterprise systems.

• Ensure accurate and timely user provisioning, modification, and deactivation within IAM tools and directories.

• Validate access requests against defined policies and entitlement matrices.

• Coordinate with HR and Service Desk teams to maintain data accuracy and timely updates.

2. Access Provisioning & Governance

• Manage access requests and approvals via ITSM tools (e.g., ManageEngine, ServiceNow).

• Implement and maintain Role-Based Access Control (RBAC) and Segregation of Duties (SoD).

• Maintain access catalogs and entitlement documentation.

• Work with application owners to review and rationalize access roles periodically.

3. Access Reviews & Compliance

• Conduct periodic access reviews and recertifications.

• Identify and remediate inactive or orphaned accounts.

• Support internal/external audits (SOX, GDPR, ISO27001) and maintain compliance evidence.

4. Directory and Platform Administration

• Manage day-to-day operations in Active Directory and Azure AD (user/group management, policies).

• Configure and support MFA, password resets, and conditional access.

• Troubleshoot authentication and access issues across platforms.

• Support integrations between IAM platforms and target applications.

5. Reporting & Continuous Improvement

• Generate reports for provisioning SLAs, exceptions, and compliance metrics.

• Maintain SOPs and Knowledge Base documentation.

• Identify and automate manual IAM processes using scripts or workflows.

• Participate in investigations of unauthorized or failed access attempts.

Required Skills

• 3–7 years of hands-on experience in Identity & Access Management operations.

• Strong knowledge of Active Directory, Azure AD, and access control models.

• Proficiency in user provisioning, access modification, and de-provisioning workflows.

• Familiarity with RBAC, SoD, MFA, and SSO.

• Experience with ITSM tools (e.g., ManageEngine, ServiceNow).

• Understanding of compliance frameworks (SOX, ISO27001, GDPR).

• Strong analytical, troubleshooting, and documentation skills.

Added Advantage

• Experience with IAM tools such as SailPoint, CyberArk, Okta, or Saviynt.

• Knowledge of PowerShell scripting or API automation.

• Exposure to cloud IAM (AWS IAM / Azure RBAC).

• Understanding of M365 access controls and email security policies.

User lifecycle management,Access provisioning,Access reviews and governance